CVE-2018-11776

CVE-2018-11776 Investigation of CVE-2018-11776 vulnerability that allows attackers to remotely execute code and gain control over Apache Struts-based applications. Install and Exploiting https://github.com/hook-s3c/CVE-2018-11776-Python-PoC Suricata In the file "test.rules " presents a rule for t...

wolfGuard

WolfGuard VPN with FIPS 140-3 cryptography WolfGuard is the wolfSSL FIPS-compliant refactor of Linux kernel-based WireGuard, originally designed and authored by Jason Donenfeld. Usage is essentially identical. There are two principal components to WolfGuard, the wolfguard.ko kernel module and the...

SYNwall

SYNwall Zero config IoT firewall. SYNwall is a project built for the time being as a Linux Kernel Module, to implement a transparent and no-config/no-maintenance firewall. You may want to have a look to the for an example of usage. Basics Usually IoT devices are out of a central control, with low...

multi_path

multipath - exploit for p0 issue 1558 CVE-2018-4241 @i41nbeer mptcpusrconnectx is the handler for the connectx syscall for the APMULTIPATH socket family. The logic of this function fails to correctly handle source and destination sockaddrs which aren't AFINET or AFINET6: root@kitploit: // verify...

CVE-2025-47827

CVE-2025-47827 Proof-of-concept and vulnerability report for CVE-2025-47827. Contents Description Disclosure Impact Detection Mitigation Binaries Proof of Concept Resources Description In IGEL OS before v11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a...

ksentinel

ksentinel - Kernel Syscalls Integrity Monitor Overview ksentinel monitors critical kernel functions and the syscall table for unauthorized modifications. It detects common syscalls that are targeted by most rootkits including ftrace hooks, kprobes, and syscall table hijacking. Features Function...

cve-2019-11477-poc

cve-2019-11477-poc Prueba simple 1. Inicie dos máquinas virtuales una para un servidor SSL y la otra para un cliente SSL 2. Servidor Ejecute la aplicación del servidor cd apps ./server.sh 7000 3. Cliente Instale los paquetes requeridos sudo apt-get install libmnl-dev sudo apt-get install...

CVE-2026-31431-check

Comprobación de CVE-2026-31431 Comprobador de solo lectura para la vulnerabilidad local-root algifaead CVE-2026-31431. Examina la configuración del kernel, el estado de los módulos, la accesibilidad de los sockets AFALG y cualquier mitigación que hayas aplicado, y luego imprime un veredicto. No...

parallels-plist-escape

parallels-plist-escape This repository contains exploits for CVE-2023-27327 and CVE-2023-27328, which can be used together to escape a Parallels Desktop virtual machine, prior to Parallels Desktop 18.1.1. It also contains code for a required kernel module, in prlmod, which can be used to send...

PF_RING

PFRING™ Introduction PFRING™ is a Linux kernel module and user-space framework that allows you to process packets at high-rates while providing you a consistent API for packet processing applications. Who needs PFRING™? Basically everyone who has to handle many packets per second. The term ‘many’...

linux-root-kit

Acerca de Este Proyecto Este proyecto fue desarrollado como parte del curso de Digitale Forensik en la Technische Hochschule Deggendorf. Demuestra una investigación forense completa y una simulación de ataque que involucra: Un ataque de confusión de dependencias en Python utilizando un paquete...

vcheck

vcheck Audit a remote Linux host over SSH for the Copy Fail and Dirty Frag kernel-module vulnerabilities and, optionally, apply mitigations:...

antispy

AntiSpy English | 简体中文 A powerful anti rootkit toolkit AntiSpy is a free but powerful anti virus and rootkits toolkit. It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks. With its assistance,you can easily spot and...

nmap-CVE-2022-21907

nmap-CVE-2022-21907 Repository containing nse script for vulnerability CVE-2022-21907. It is a component IIS vulnerability on Windows. It allows remote code execution. The vulnerability affects the kernel module http.sys, which handles most basic IIS operations. After uploading the payload, the...

LiME

LiME Linux Memory Extractor A Loadable Kernel Module LKM for volatile memory acquisition from Linux and Linux-based devices, such as Android. LiME minimizes its interaction between user and kernel space processes during acquisition, producing memory captures that are more forensically sound than...

RootKit

Este es un rootkit que fue probado en ubuntu-16.04.6-desktop-amd64 Linux 4.4, pero debería ser fácil portarlo a diferentes versiones del kernel. Enlace al video -- https://drive.google.com/file/d/1yDktAg9vIPBH3OPEBYset9OdQb0LMevA/view?usp=sharing Instalación Clonar el repositorio root@kitploit: g...

ModTracer

ModTracer v1.0 ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again. Another way to make an LKM visible is using the imperius trick: https://github.com/MatheuZSecurity/Imperius Join in Rootkit Researchers Group https://discord.gg/66N5ZQppU7...

insmod_block

insmodblock Linux: - - - - - - - Por nu11secur1ty: https://github.com/nu11secur1ty/linux-nu11secur1ty Linux: - - - - - - - Por nu11secur1ty: https://gitlab.com/nu11secur1ty/linux-nu11secur1ty txt Linux Kernel security modules by nu11secur1ty GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007...

OverlayFS-CVE-2021-3493

OverlayFS — CVE-2021–3493 || Writeup || Tryhackme 📖 Introduction What is OverlayFS.? OverlayFS is a Linux kernel module that allows the system to combine several mount points into one, so that you can access all the files from each within one directory structure. It’s often used by live USBs, or...

cve-2017-2636-el

cve-2017-2636-el This role installs the workaround documented on https://access.redhat.com/security/cve/CVE-2017-2636 to blacklist the nhdlc module from being loaded. Requirements This role only applies to Red Hat Enterprise Linux versions 6 and 7, and variants CentOS, CloudLinux, etc. License MI...